Binance proposes "Know Your Agent" framework for agentic finance

Binance Global Policy has published a framework paper proposing that financial crime compliance regimes be extended to cover AI agents, software systems capable of investigating alerts, screening sanctions exposure, and, increasingly, initiating payments without direct human instruction. The paper, authored by Steven McWhirter, Binance's Global Head of Policy, and Diego Montes Serralde, introduces what it calls a "Know Your Agent" (KYA) standard designed to sit alongside, not displace, existing Know Your Customer (KYC) and anti-money-laundering obligations.

The core argument is that existing compliance architecture was built around identifying people, not software. As AI agents gain the operational authority to act on behalf of customers and institutions, the question of who, or what, actually instructed a transaction becomes legally and regulatorily unanswered. The paper identifies "unattributable action" as the primary risk, not AI autonomy itself.

A five-layer accountability stack

The proposed KYA framework rests on five sequential layers. The first establishes a distinct identity for each agent, tied to its provider, deployer, version, and credentials. The second links that identity to an accountable human or institutional principal. The third enforces least-privilege access, separating an agent's ability to recommend from its authority to execute. The fourth requires authenticated delegation chains with continuous behavioural and transactional monitoring. The fifth mandates revocability and a full audit trail back to the authorising principal.

Binding the architecture together is the principle of "bounded autonomy": agents may analyse and prioritise, but consequential actions must remain subject to deterministic, rules-based controls that the agent itself cannot override. McWhirter frames the stakes directly: "When software can investigate, decide and move money, we need to be able to say with confidence which agent acted, on whose authority, and who remains accountable. Autonomy should never outrun our ability to verify, bound and, where necessary, revoke it."

Regulatory signals already moving in this direction

Binance's proposal lands at a moment when regulators are independently converging on similar concerns. The Monetary Authority of Singapore published its Supervisory and Regulatory Framework for AI (SAFR) in July 2026, focusing on runtime safeguards and auditability for AI systems in financial services. The UK's Financial Services AI Adoption Plan explicitly recommends a "Know Your Agent" protocol and interoperable machine-to-machine authentication for agentic payments. The IMF has characterised the shift as a move from "click-to-pay" to "decide-to-pay", a compressed phrase that captures the jurisdictional and liability questions regulators have not yet resolved.

That these three distinct bodies have reached the same framing independently suggests the compliance gap is now widely recognised, even if no binding international standard yet exists. Binance's paper is a policy contribution rather than a regulatory proposal, but given the exchange's scale, it reports more than 300 million registered users across 100-plus countries, its framework papers carry weight in consultations with national financial intelligence units and standard-setting bodies.

Cross-sector implications for agentic capital flows

The convergence angle here extends well beyond crypto. Agentic finance is not a blockchain-specific phenomenon. The same class of autonomous software agent is being deployed by traditional asset managers to execute rebalancing instructions, by payments processors to route cross-border settlements, and by insurers to approve or decline claims. The compliance gap Binance describes is equally present in those contexts, and the KYA framework's five layers are sector-agnostic by design.

For macro investors and capital allocators, the implication is structural: every sector deploying agentic AI in a regulated financial context will face some version of this accountability question. Firms that build auditable delegation chains early will carry a compliance advantage in licensing negotiations and institutional partnership discussions. Those that do not may find regulators, particularly in the EU, Singapore, and the UK, imposing frameworks on them rather than with them. The race to define the compliance layer for agentic finance has begun; Binance has made the first formal move.